Description
Buffer overflow in the virtio subsystem in qemu-kvm 0.14.0 and earlier allows privileged guest users to cause a denial of service (guest crash) or gain privileges via a crafted indirect descriptor related to "virtqueue in and out requests."
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 6.0 | qemu-kvm | 0.12.5+dfsg-5+squeeze6 | DSA-2282-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | qemu-img +2 | 2:0.12.1.2-2.160.el6_1.2 | RHSA-2011:0919 |
Advisories 2
- DSA-2282-1 qemu-kvm - several Debian Security (DSA / DLA) · Mar 9, 2026
- RHSA-2011:0919 Red Hat Security Advisory: qemu-kvm security and bug fix update Red Hat Security Advisories (RHSA) · Nov 22, 2025
References
- RHSA-2011:0919 vendor-advisory
- 45170 third-party-advisory
- 45354 third-party-advisory
- 45301 third-party-advisory
- DSA-2282 vendor-advisory
- 45158 third-party-advisory
- openSUSE-SU-2011:0803 vendor-advisory
- 45188 third-party-advisory
- 74751 vdb-entry
- USN-1165-1 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=713589
- 45187 third-party-advisory
- SUSE-SU-2011:0806 vendor-advisory